SY0-301無料問題集「CompTIA Security+ Certification Exam (SY0-301)」

質問 1

Which of the following could a security administrator implement to mitigate the risk of tailgating for a large organization?

（A）Train employees on correct data disposal techniques and enforce policies.

（B）Train employees on risks associated with social engineering attacks and enforce policies.

（C）Only allow employees to go on break one at a time and post security guards 24/7 at each entrance.

（D）Only allow employees to enter or leave through one door at specified times of the day.

正解：B 解答を投票する

質問 2

Which of the following is mainly used for remote access into the network?

（A）TACACS+

（B）RADIUS

（C）XTACACS

（D）Kerberos

正解：B 解答を投票する

質問 3

Pete, the Chief Executive Officer (CEO) of a company, has increased his travel plans for the next two years to improve business relations. Which of the following would need to be in place in case something happens to Pete?

（A）Separation of duty

（B）Succession planning

（C）Removing single loss expectancy

（D）Disaster recovery

正解：B 解答を投票する

質問 4

Certificates are used for: (Select TWO).

（A）Client authentication.

（B）Code signing.

（C）Access control lists.

（D）Password hashing.

（E）WEP encryption.

正解：A、B 解答を投票する

質問 5

A company's employees were victims of a spear phishing campaign impersonating the CEO. The company would now like to implement a solution to improve the overall security posture by assuring their employees that email originated from the CEO. Which of the following controls could they implement to BEST meet this goal?

（A）Antivirus software

（B）Spam filter

（C）Digital certificates

（D）Digital signatures

正解：D 解答を投票する

質問 6

Which of the following uses port 22 by default? (Select THREE).

（A）SSL

（B）FTPS

（C）SFTP

（D）TLS

（E）SNMP

（F）SCP

（G）SMTP

（H）SSH

正解：C、F、H 解答を投票する

質問 7

Which of the following is a hardware based encryption device?

（A）TPM

（B）EFS

（C）TrueCrypt

（D）SLE

正解：A 解答を投票する

質問 8

The BEST methods for a web developer to prevent the website application code from being vulnerable to cross-site request forgery (XSRF) is to: (Select TWO).

（A）Ensure all HTML tags are enclosed in angle brackets, e.g., "<" and ">".

（B）Validate and filter input on the server side and client side.

（C）Use a web proxy to pass website requests between the user and the application.

（D）Restrict and sanitize use of special characters in input and URLs.

（E）Permit redirection to Internet-facing web URLs.

正解：B、D 解答を投票する

質問 9

A customer service department has a business need to send high volumes of confidential information to customers electronically. All emails go through a DLP scanner. Which of the following is the BEST solution to meet the business needs and protect confidential information?

（A）Prevent impacted outgoing emails

（B）Automatically encrypt impacted outgoing emails

（C）Automatically encrypt impacted incoming emails

（D）Monitor impacted outgoing emails

正解：B 解答を投票する

質問 10

The Human Resources department has a parent shared folder setup on the server. There are two groups that have access, one called managers and one called staff. There are many sub folders under the parent shared folder, one is called payroll. The parent folder access control list propagates all subfolders and all subfolders inherit the parent permission. Which of the following is the quickest way to prevent the staff group from gaining access to the payroll folder?

（A）Remove the staff group from the payroll folder

（B）Remove inheritance from the payroll folder

（C）Implicit deny on the payroll folder for the staff group

（D）Implicit deny on the payroll folder for the managers group

正解：C 解答を投票する

質問 11

A system administrator attempts to ping a hostname and the response is 2001:4860:0:2001::68. Which of the following replies has the administrator received?

（A）IPv6 address

（B）IPv4 address

（C）The local MAC address

（D）The loopback address

正解：A 解答を投票する

質問 12

In which of the following scenarios is PKI LEAST hardened?

（A）The CRL is posted to a publicly accessible location.

（B）The recorded time offsets are developed with symmetric keys.

（C）All public keys are accessed by an unauthorized user.

（D）A malicious CA certificate is loaded on all the clients.

正解：D 解答を投票する

質問 13

Which of the following is a best practice for error and exception handling?

（A）Log detailed exception but display generic error message

（B）Do not log or display error or exception messages

（C）Log and display detailed error and exception messages

（D）Display detailed exception but log generic error message

正解：A 解答を投票する

SY0-301 無料問題集「CompTIA Security+ Certification Exam (SY0-301)」

弊社を連絡する

関連リンク

トップ試験